Jakub Koman
Senior Cybersecurity Specialist at NASK’s Cybersecurity Team, focused on large-scale network event analysis and the day-to-day operation of a network telescope. Previously conducted IoT security research and developed a custom framework for penetration testing of Bluetooth devices. Holder of multiple cybersecurity certifications, including OSCP+.
Session
Network telescopes capture vast amounts of unsolicited Internet traffic, much of which is often dismissed as background noise. In reality, this traffic contains valuable information about Internet-wide scanning, botnet activity, exploitation attempts, misconfigurations, data leaks, DDoS activity, and more.
The workshop will introduce the approaches used by CIRCL and NASK/CERT.PL to extract useful information from network telescope, while also leaving ample time for independent experimentation. Participants will leave with a practical understanding of how to turn seemingly meaningless packets into observations of large-scale Internet phenomena and actionable threat intelligence.